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Abstract 

Methods of finding good quantum error correcting codes are discussed, and many 
example codes are presented. The recipe C$- C C\, where C\ and C2 are classical 
codes, is used to obtain codes for up to 16 information qubits with correction of 
small numbers of errors. The results are tabulated. More efficient codes are obtained 
by allowing C\ to have reduced distance, and introducing sign changes among the 
code words in a systematic manner. This systematic approach leads to single-error 
correcting codes for 3, 4 and 5 information qubits with block lengths of 8, 10 and 
11 qubits respectively. 

PACS numbers 03.65.Bz,89.70.+c 

Two recent papers have shown that efficient quantum error-correcting codes exist 
[ED, 0. A quantum error- correcting code is a method of storing or transmitting K bits of 
quantum information using n > K qubits||, in such a way that if an arbitrary subset 
of the n qubits undergoes arbitrary errors, the transmitted quantum information can 
nevertheless be recovered exactly. The only condition is that the values of n and K, and 
the structure of the error-correcting code, place an upper limit on the number of qubits 
which can undergo errors before quantum information is irretrievably lost. In this context 
an 'error' is any physical process which influences the quantum information but whose 
effect cannot be 'undone' simply by applying, upon reception, a time-reversed version of 
the 'error' process. In practice this will be because the errors are unpredictable (eg caused 
by unknown stray fields) or they entangle the information-bearing system with another 
system which is not accessible to detailed manipulation (eg the environment). The latter 
case, entanglement with the environment, includes as a subset relaxation processes such 
as spontaneous emission, and phase decoherence. 

A simple such error correcting code was presented in |4j], and a general method of 
encoding a single qubit with correction of multiple errors was presented in |J. More 
importantly, further work |l], |2| derived whole classes of codes, for multiple-correction of 
many qubits, and showed that efficient codes exist. The word 'efficient' in this context 
refers to the fact that the ratio Kj n, which is called the rate of the code, need not become 
smaller and smaller as K increases, for a given probability of error per qubit. However, 
whereas the pioneering works just mentioned established the possibility of efficient quan- 
tum error correction, and presented the simplest codes possible, they did not address 



the more pragmatic issue of identifying other specific useful codes. This is the subject 
addressed in this paper. 

It is important to identify codes for more than a single qubit, since it is known that 
codes involving more information can be more powerful than simple repetition of single- 
qubit codes. In comparing two coding techniques, one may appear more powerful because 
it can encode a single qubit more efficiently However, if it cannot also be applied to many 
qubits in an efficient way, for example because finding a good code is too difficult, then a 
simpler technique for which multiple-qubit codes can can be found may end up being the 
better choice. 

The earlier simple codes have now been improved upon with the discovery |6|, 0] of a 
'perfect' code, that is, one which fills a lower bound (elucidated below) on the number 
of qubits n required to do the job. This code is more efficient than those constructed 
by the recipe of || and 0, and introduces an important new class of codes. However, 
it is not yet known how to generalise the construction method in order to obtain other 
efficient codes, so once again the task of identifying specific examples of useful codes is 
an important one. These more efficient codes are also discussed here. Simple methods to 
find good codes are described, and three new examples presented. 

Note that the errors which we wish to correct are completely random, and we have 
no knowledge of their nature other than that they affect different qubits independently. 
If we are in possession of further information about an error process, this can be used 
to construct codes which are more resistant to the errors caused by that process. An 
example is when the dominant error process is spontaneous emission. In this case the 
'error' process is in fact almost completely known, but causes an unavoidable coupling to 
the environment. Efficient coding for this situation has recently been considered B, In 
the present work we make the standard assumption that the only predictable feature of 
the errors is their random nature, so we wish the code to correct as many arbitrary errors 
as possible using as few qubits as possible. 

Arbitrary errors of qubits can usefully be divided into 'amplitude errors', that is, 
changes of the form |0) <-> |1), and 'phase errors', that is, changes of the form |0) + 
|1) <-> |0) — |1). This division is not meant to imply that these simple state rotations in 
Hilbert space are the only form of error considered, but rather a completely general error 
can be described as a combination of such amplitude and phase errors, with associated 
entanglement with the environment. Less obviously, but importantly, a method which can 
correct both amplitude and phase errors is sufficient to correct general errors Jl], ^|, [lOj . 

An essential result which relates the problem of error-correction coding of a quantum 
channel to that of a classical channel is embodied in theorems 5 and 6 of @ and theorem 
lofgj: 

Theorem ('Quantum Correction Theorem:') If C\ and C2 are both linear 
[n, k, d] codes with {0} C C^; Q C\ C. Fg, then the quantum code Qci,c 2 18 a 
t-error correcting code, where t = [_(d — 1)/2J . 

This statement is taken from [|1|]. Note, however, that we have defined k to be the 
dimension of C% rather than of its dual as in |IJ, and replaced C2 by C^, to make the 
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reasoning more symetric. The symbol F% refers to the n-dimensional vector space over 
a binary field. The phrase 't-error correcting code' refers to the fact that this form of 
encoding allows correction after arbitrary errors of t qubits. This is stated and proved as 
a seperate theorem (theorem 6) in [[|. In [fj], the equivalent statement of the Quantum 
Correction Theorem is: 

To encode K qubits with minimum distance d% in one basis, and minimum 
distance di in the other, it is sufficient to find a linear code of minimum 
distance d\, whose K'th order subcode is the dual of a distance o?2 code. 

Since has dimension n — k, and C% C C\, clearly is a i^'th order subcode 
of C\, with K = 2k — n, which links the first statement to the second. In the second 
statement a more general form is considered, in which the minimum distances of C\ and 
C2 need not be equal. This has consequences for the type of error which can be corrected, 
as elucidated in ||. In particular, if only phase errors are present, then d\ can be 1, that 
is, C\ is simply the set of all words, so the coding problem reduces to that of finding 
C2 = [n, K, d-2\ , which means it is equivalent to the classical coding problem. The same 
simplification applies when only amplitude errors are present, in which case C2 is the set 
of all words and C\ is the error correcting code. 

The second statement above refers to two different bases in which the state of the 
information-bearing quantum system may be expressed. For a single qubit, basis 1 is 
{|0) , |1)}, and basis 2 is {(|0) + |l))A/2, (|0> - |l))A/2}. For multiple qubits, bases 1 
and 2 are defined to be the respective product bases. The reason why these bases are 
introduced is that correction of amplitude errors is essentially a classical error correction 
operating in basis 1, while that of phase errors is essentially a classical error correction 
operating in basis 2 0. 

The rest of this paper is concerned with finding quantum error-correcting codes. We 
begin with codes obtained according to the recipe of the Quantum Correction Theorem. 
In section |IJ we consider arbitrary d\ and g?2> for the case K — 0. This is not a fruitless 
exercise since it will be shown that a code with K > can be obtained from one with 
K = 0. In section |2| the case d% = c?2 = d is considered, for arbitrary d and K. This case 
is important because a completely general error of less than d/2 qubits can be corrected 
by the use of such a code (Quantum Correction Theorem above, and theorem 6 of [§]). As 
well as specific codes, simple methods for finding codes and for deducing one code from 
another are given. 

Note that whereas the method of sections [1] and |2| will produce a set of useful codes, 
whose rate does not reduce as K is increased at constant error probability per qubit, it 
will not produce the most efficient codes possible. However, the codes may be regarded 
as a starting point from which more efficient codes can be derived by judicious use of sign 
changes with code augmentation (adding of code words) or puncturing (deletion of bits). 
Such methods are discussed in section ^ where optimal or almost optimal quantum codes 
are presented for encoding 3 to 5 qubits with single-error correction. 

Many powerful mathematical (group theoretical) techniques have been applied in the 
pursuit of classical coding theory ||11|| , and since completing the present work I have learned 
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of two studies which apply such techniques with much success to quantum coding fl4" , |T5[ . 
In this paper, the approach is to use simple concepts such as Hamming distance, parity 
check and generator matrices, and examine methods to convert classical codes into good 
quantum codes. The simplicity of these concepts has the advantage of being suggestive of 
useful coding techniques, since they make the structure of the codes simple to appreciate, 
but they do not always lead to analytical proofs of the properties of the quantum codes, 
for which one must resort to computer testing. The two approaches of trying simple ideas 
and applying powerful analytical methods are both useful in the quest to find good codes. 
The matrix methods used here have the further advantage that the quantum networks 
for encoding and correction can be derived quite straightforwardly from the parity check 
and generator matrices, by generalising the method described in [|J. 

To distinguish the various types of code, it is helpful to have a concise notation. Clas- 
sical linear error correcting codes are identified by the notation [n, k, d], meaning a code 
by which n classical bits can store k bits of classical information with minimum distance 
d, hence allowing correction of up to [(d— 1) /2j errors. The notation {n, K, di, d 2 } is here 
introduced to identify a "quantum code" , meaning a code by which n quantum bits can 
store K bits of quantum information and allow correction of up to [_(^i — 1) /2J amplitude 
errors, and simultaneously up to [(d 2 ~ 1)/2J phase errors. For codes with d\ = d 2 = d 
the notation will be abreviated to {n, K, d} = {n, K,d,d}. Such codes allow recovery 
after arbitrary error of up to [_(d — l)/2j of the quantum bits. It may be argued that the 
Hamming distance d is no longer a useful term in the quantum context, since it is not 
clear whether 2t + 1 always corresponds to a quantity with the correct properties to be 
called a 'distance' between code vectors of a quantum t-error correcting code. However, 
I retain the use of d, both because it implies the distinction between error detection and 
correction, and because the concept of distance remains useful in searching for quantum 
codes, as will be shown in section |3]. 

The recipe C\ = [n, k, d\]; C 2 = [n, k, d 2 ); C 2 Q C\ of the Quantum Correction 
Theorem leads to a code construction in which each code vector (ie encoded version of a 
given logical symbol) consists of a superposition of words with coefficients equal in sign as 
well as magnitude in one of the bases 1 or 2 (though not in the other). One may therefore 
choose the sign of all coefficients in the superposition to be positive, in the chosen basis. A 
code having this special form (ie all those discussed in sections [I] and |2|) will be indicated 
by appending a superscript '+' sign to the notation, ie {n, K, d%, d 2 } + . In general, by 
allowing more general code vectors, a code having the same correction ability but higher 
rate can be obtained from one with all-positive signs in the original basis. In symbols, 

{n, K, di, d 2 } + =>- ( {n 1 < n, K, d\, d 2 } and/or {n, K' > K, di, d 2 } ) , (1) 

where the implication sign is used to mean that once the left-hand side code is known, 
the right-hand side code can be obtained easily. 
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1 Zero information qubits 



This section will consider {n, 0, di, c?2} + codes. If di is the minimum distance of a classical 
linear code C, then by the Quantum Correction Theorem (second statement above), 62 
is just the minimum distance of the dual code C -1 , when K = 0. In symbols, 

[n,k,d],d x = {n,0,d, (2) 



Helgert and Stinaff [0] have prepared a table of the minimum distance d of linear 
codes [n, fc, of] for given n and fc. Specifically, the interesting quantity is the highest 
d = d max (n, k) permitted for the given values of n and k. If d ma , x (n, k) is not known then 
Helgert and Stinaff give upper and lower bounds on it. For brevity, Helgert and Stinaff 's 
table will be referred to as HS. It is possible to convert such a table into one providing 
a lower bound on the smallest number of bits n = n m m{d, d' 1 ) necessary in order that a 
code can have distance d and its dual have distance d ± . For a given d, one commences 
with n = d, which gives a code [d, l,d], d 1 - = 2. To allow larger values of d , n must 
be increased, and k set to the largest value allowing an [n, k, d] code, as indicated by 
HS. The values of n and k are increased together in this way until HS indicates that an 
[n, n — k, d 1 -] code is possible. Clearly, there is no code with n smaller than the value 
thus obtained, for which both [n, k, d] and [n, n — k, d ] codes are possible. This does not 
prove, however, that an [n, k, d] code exists whose dual has distance d^. A necessary but 
not sufficient existence condition is established, or in other words, a lower bound on the 
value of n min (d, d^). This lower bound is given in table [IJ. 

To find out whether the lower bound in table [I] is sharp, I have attempted to identify 
codes which satisfy the bound. Success at identifying such a code is indicated by an 
underlined n value in table [I], and the code identified is described in table |[ An asterisk 
in table |] indicates that a code with n close to the lower bound exists and is identified in 
the caption. 

In table |2|, the identification [n, k, d] + [n', k', d'\ refers to a code built by combining two 
others as follows. To the check matrix of the first code ([n, k,d\) in the sum, additional 
columns are added as specified by the generator matrix of the second code ([n',k',d']) 
in the sum. This lengthens the minimum distance of the dual by d! while increasing n 
by n' and reducing d. For example, the code identified as "[16, 11,4] extended Hamming 
+ [4, 4, 1]" is the [20, 15, 3] code with the following check matrix: 

/ 11111111111111110000 \ 
10101010101010101000 
H x = 01100110011001100100 
00011110000111100010 
v 00000001111111100001 J 

Its dual has minimum distance 8 + 1 = 9. 

One can 'navigate' around table [1] to some extent by use of the following two construc- 
tions: 

i n k d] d ±^ { [n-l,k-l,d], d ± -l 



(3) 



5 



n 


3 


5 


7 


d 
9 


11 


13 


15 


3 


6 














5 


U 


16* 












7 


14 


20 


22 










d L 9 


20 


25 


30 


34 








11 


23 


28* 


33 


39 


42* 






13 


27 


33 


38 


43 


46 


52 




15 


30 


37 


42 


47 


51 


56 


60* 



Table 1: Lower bound on n permitting a dual pair of codes of distances d and d . The 
underlined figures (the column d = 3 and the row d 1 - = 7) indicate that the bound is sharp 
and the code is given below. (*) A reduced Golay code can be used to obtain d = d 1 - = 5 
with n = 18. The [31,16,5] BCH code has d = 12, so d^d 1 - = 5,11 is possible with 
n = 30. There are Quadratic Residue self-dual codes with parameters [48, 24, 12] and 
[80,40, 16] so d = d 1 - = 11, 15 is possible with n = 46, 78 respectively |TT| . 
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Hamming <-> Simplex 
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BCH <-> BCH^ 



Table 2: Properties of codes making up table 1. The size of the code is k, that of the 
dual is n — k. Where the code is identified as a sum of two or more, the first code in the 
sum is extended by the others in a manner explained in the text. Other codes may be 
possible, having the same {n, k, d, <i J -} + but a different structure. However, there are no 
linear codes of smaller n for the same d, d- 1 , with the exception of the final entry: 2-error 
correcting BCH codes are not necessarily optimal. They are included here because they 
are close to optimal and easily constructed. 
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In these two constructions, the code on the right hand side is derived from the C = [n, k, d] 
code on the left hand side by removing a single row from the generator (k — > k — 1) or 
parity check (d — > d — 1) matrix. To see how the minimum distance of the dual code is 
affected, recall that the generator matrix of C is the parity check matrix of C , therefore 
deleting a row from the generator matrix of C means deleting a row from the check matrix 
of C -1 , and vice versa. A single row deleted from a generator matrix leaves the minimum 
distance either unaffected (the most likely result) or increased. A single row deleted from 
a check matrix leaves the minimum distance either reduced by one (the most likely result) 
or unaffected. 

2 K information qubits 

The case K ^ will now be addressed. The simplest case to consider is that of a classical 
code which contains its own dual: C x C C — [n, k, d]. This is only possible when 2k > n. 
Such codes have been called "weakly self-dual" |Q). Since C 1 - is a subcode of C, clearly 
the Quantum Correction Theorem can be satisfied with d± = d 2 = d and K = 2k — n, 
since C x is itself the subcode required by the theorem. In symbols, 

G L C C = [n, k, d] C = {n, 2k - n, d} + . (5) 

In such a case, the error corrector is the same in basis 1 and basis 2. An example 
is the Hamming code discussed in [0, This result transforms the search for quantum 
{n, K, d} + codes to a large extent to a search for classical weakly self-dual codes. This was 
recognised in QXJ , where a proof was given that weakly self-dual codes exist which satisfy 
the Gilbert- Varshamov bound. However, there exist {n, K, d} + codes which cannot be 
derived from weakly self-dual codes (examples are given below), and these can be more 
efficient (higher K/n for given d/ri) than the best weakly self-dual codes. 

A code contains its dual if and only if all the rows of the parity check matrix satisfy 
all the parity checks (ie wt(H; • Hj) is even, for all i,j = . . . n — k — 1). This implies 
that when a single row is deleted from the parity check matrix, the resulting code again 
contains its dual. Using the second construction given in (Q), combined with equation 
(HP, one finds 

C L c C = {n, K, d} + G ,x - QC' = {n-l,K+l,d-l} + . (6) 

This allows one to generate codes encoding more quantum information (having greater 
K) from ones of smaller K , at the expense of reduced d. Note that d is not required to fall 
by 1, but implication @ states that d does not fall by more than 1 in this construction. 

Next the following question will be addressed: we wish to encode K qubits with given 
d = d\ = g?2- What is the necessary value of n? The Quantum Correction Theorem 
implies that if subcodes of an [n, k, d] code are used, then K = 2k — n. In the case of 
single error correction, ie d = 3, Hamming's construction implies 

k<n- r/log 2 (n + l)l, (7) 
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therefore, for an {n, K, 3} + code, 

K <n — 2 [log 2 (n + 1)] . (8) 

When n = 2 r — 1 we have a perfect Hamming code, and for this case the code contains its 
dual. Therefore equality holds in @, and K = n — 2 log 2 (n + 1). The smallest n allowing 
d = 3 for values of K in the range 1 to 16 is indicated in table 

For K = 2 equation implies n > 10. In fact n = 10 is possible using the following 
code: 



( 1011001000 \ 
0101100100 
1010110010 
V 0110010001 J 



Ho. 



D 



( 1111001000 ^ 
0111100100 
1010010010 

V moiioooi J 

0001001100 
0000010011 



(9) 



(10) 



Here, H\ and H 2 give the correctors in bases 1 and 2 respectively, and the generator works 
as follows. Let C\ be the classical code of which H x is the check matrix. The two rows 
of D are the fourth and sixth rows of the generator G\ of Ci, which is obtained from the 
well-known relation 



H 1 = {A\I n _ k )<*G x = (l k \A 



'II s . 



where Ij is the j x j identity matrix, and A is the rest of the check matrix. Adding 
these two extra checks to H±, we obtain the check matrix for a subcode of G\. The 
four states (code vectors) in the quantum {10,2,3} + code are the subcode 



Gf }, whose 



generator is H 2 , and its three cosets 



A 



® Dx) , ©A) 



and D\ are the rows of D (the letter D is chosen here for 'displacement 
one may write this generation procedure as 



D x ), where D 
'). In symbols, 



G 



#2 

D 



(12) 



This equation may be regarded as a summary of the quantum network which will encode 
the two qubits of information. Note that since the rows of D are members of the code 
Ci, they satisfy all the checks of Hi, and so the cosets they generate are all subsets of 
Ci. Also, since the rows of D have odd weight, the coset 
Di, so the cosets are distinct. In general D need not 
non-overlapping of the cosets is ensured by the fact that C*2 is not a zero-distance code. 
The matrix formed by H\ plus the extra rows given by D is the generator of C%, and 



C*2 © Dij fails the parity check 
rave rows of odd weight. The 



the corrector in basis 2, H 2 , is obtained from this generator using relation (11) . All these 
relationships may be summarised as follows: 



Hi 



Gi 



D. 



(13) 
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Hi 
D 



Ho. 



Ht 



D 



G. 



(14) 
(15) 



From this one may see that an equivalent code is obtained by using Hi and D as the 



generator in equation (|T2| ) instead of H 2 and D. A further equivalent quantum code can 
be obtained by using the first two rows of G± for D, instead of the fourth and sixth rows 
(cf equations (|16|) and (|25"D below). 

The above approach can clearly be applied to any classical [n, k, d] code. That is, one 
produces a subcode by using 2k — n words from the code as extra parity checks, with the 
aim that the check matrix thus obtained is the generator of another (or the same) [n, k, d] 
code. However, it is not clear whether this method can always succeed in producing a 
useful quantum code. For example, whereas the cyclic check matrix Hi of equations (§) 
leads quickly to a quantum code, the Hamming check matrix for the same parameters 
[10,6,3] does not lead to a generator in the form given by equation ([TT|) whose rows can 
be used to form D. It would be interesting to try to prove or disprove the hypothesis 
that the existence of a classical [n, k, d] code is sufficient to imply at least the existence of 
a quantum {n, 2k — n, d} + code. The author's current impression is that this hypothesis 
is untrue in general. However, it is true for weakly self-dual codes, and probably gives a 
close estimate of the parameter values possible for other cases. 

The single-error correcting codes indicated in table ^ were all obtained by using the 
above method of using code words as extra parity checks, but note that whereas I have 
thus found single-error correcting {13,5,3} + and {14, 6,3} + codes, filling the lower limit 
on n set by the Hamming bound, I have not found {11,3,3} + or {12,4,3} + codes even 
though classical [11, 7, 3] and [12, 8, 3] codes exist. These single error-correcting quantum 
codes are all obtained from the cyclic code given by the irreducible primitive polynomial 
x 4 = 1 + x. The check matrix Hi in equations (|9|) is the check matrix of this cyclic code 
for the case n = 10, and for higher n, up to n = 15, further columns are added to the 
front of the matrix following the standard procedure. Once we have Hi, the quantum 
code is fully defined once the relevant displacement matrix D is given. For n — 12 to 14 
the following matrices D fulfill the requirements for single error correction: 



D 



{12,3,3}+ 



D 



{13,5,3}H 



/ 001000001010 
000100000101 
V 000010001011 

/ 1000000001111 \ 
0100000001110 
0010000000111 
0001000001010 
y 0000000010011 J 



(16) 



(17) 
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/ 10000000001101 \ 
01000000001111 
00100000001110 
00010000000111 
00001000001010 

V 00000000010011 / 



(18) 



Note that the cases n = 13 and n = 14 are similar to one another, and can be obtained 
by reducing the n = 15 code. For n = 15 the code C\ contains its own dual. 

Using the above methods, and once again the table of HS, lists of quantum {n, K, d} + 
codes can be compiled. The results are summarised in tables ^ and f|. The upper bound on 
d is found from the classical bound d max (n, k = (K+n)/2) given by HS. As it stands, table 
|^ is incomplete in that for most entries I have not found codes which realise the upper 
bound, thus prooving that it is obtainable. However, classical self-dual codes supply 
efficient quantum codes of low rate, high distance (low K/n, high d), and BCH codes 
supply efficient quantum codes of high rate, low distance. Therefore we have identified 
infinite series of codes, as n increases, at the two ends of the range K = . . . ~ {n — 



with the D matrix equal to the last 7 rows of G\. This code can be obtained by adding 
a check bit to the [16, 11,4] extended Hamming code. 

The single-error correcting codes indicated in table [3] as certainly obtainable (ie which 
I have succeeded in finding) for 7 < K < 17 do not realise the minimum implied by 
the results of HS, but require one additional qubit, similar to the cases K = 3 and 4 
already remarked. Using the clue mentioned above that a cyclic classical code rather 
than a Hamming code is a good choice, all the codes from K — 8 to 16 were obtained 
from the cyclic classical codes of primitive polynomial x 5 = 1 + x 3 . In this series of codes, 
a classical [n, k, d] code gives rise to a quantum {n, 2k — n — 1, d} + code. For example, 



lo S2H)- 

The {17, 7, 3} + code in table [5] is specified by the following check matrix 



/ 01100111100110000 \ 
10111100101101000 
11010010111100100 
11101001110000010 

v 00011111110000001 j 



(19) 
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the generator for K = 16 is 



G 



{27,16,3^ 



/ 011001111100011011101010000 \ 
101100111110001101110101000 
001111100011011101010000100 
100111110001101110101000010 
110011111000110111010100001 
001000000000000000000011100 
000010000000000000000000111 
0000001000000000000000 11111 
000000001000000000000011001 
000000000010000000000001100 
000000000001000000000000110 
000000000000100000000000011 
000000000000010000000010101 
0000000000000010000000 11110 
000000000000000100000001 1 1 1 
000000000000000010000010011 
000000000000000001000011101 
000000000000000000100011010 
000000000000000000010001101 
000000000000000000001010010 
V 000000000000000000000101001 / 



(20) 



The generators for the other codes in this series have a similar form and will not be listed. 

A {20, 9, 3} + code can also be obtained from the classical code having the minimum 
n for d — 3, d — 9, referred to in tables [l] and [| Its check matrix Hi is given in equation 
(|3[), and the displacement matrix is formed from rows of Gi as follows 

/ 01000000000000010100 \ 
00000100000000010110 
00000001000000010001 
00000000010000010101 

00000000001000011101 (21) 
00000000000100010011 
00000000000010011011 
00000000000001010111 
V 00000000000000111111 J 



D 



{20,9,3}^ 



3 More efficient codes 

Implication (|1]) was used in the introduction to encapsulate the twin facts that in general 
{n, K, d} + codes are not the most efficient possible, and that they can be used as a 
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56 




45 












4 


29 


68 
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56 




4* 
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7*8 




68 




67 








6 




5* 




4 









Table 3: Upper bound on d for {n, K, d} + codes of small K and n. Entries which are 
identical to the one immediately above them (ie with n reduced by 1) are left blank, in 
order to bring out the pattern in the results. A pair of figures is given when the table 



of HS [12] indicates a range of distance values rather than a precise upper limit. The 
underlined values are produced by codes given in table f| or obtained from them by the 
methods discussed in the text. For these codes the listed upper bound is thus shown to be 
obtainable. Some codes are obtained from one another by deleting a row of G\ (moving 
upwards and to the left in the table), or by deleting a row of Hi (moving upwards and to 
the right in the table). An asterisk (*) indicates a self-dual or weakly self-dual code. 
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n 


A 


7 

a 


code G 




4 


Z 


Z 






n 


n — Z 


Z 


Even weight, for even n 


2 r 


- 1 


n — 2 log 2 (n + 1) 


3 


Hamming, r > 2 


eg. 7 


1 


3 






15 


7 


3 






31 


21 


3 




2 r 


- 1 


n — 4 log 2 (n + 1) 


5 


BCH, r > 4 


eg 


. 31 


11 


5 






29 


11 


4 


reduced BCH,^ C C 


2 r 


- 1 


n — It log 2 («- + 1) 


2t+l 


t-error correcting BCH 


eg 


. 31 


1 


7 


BCH 




16 


6 


4 


extended Hamming 




17 


7 


3 


see text 


19 - 


-27 


8-16 


3 


cyclic, see text 




23 


1 


7 


Golay 




48 





12 


Quadratic residue (self-dual) 




63 


3 


11 


BCH 




63 


15 


9 


BCH 




80 





16 


Quadratic residue (self-dual) 




104 





20 


Quadratic residue (self-dual) 




127 


15 


17 


BCH 



Table 4: Example {n, K, d} + codes. The final entries give some assorted values of n and 
K larger than those covered by table |[ 
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starting-point to obtain more efficient {n, K, d} quantum codes. The simplest example is 
the perfect {5, 1, 3} quantum code described in || 0, which can be obtained by deleting 
any two bits from the {7, 1, 3} + code described in [^], |2|, and changing the signs of a subset 
of the words in each of the two code vectors. The relevent sign changes can be found for 
this simplest case by an exhaustive computer search. The computer search is a useful 
tool in the task of finding good codes, which may be likened to a search for the best fruit 
on a many-branched tree. However, a complete search of all possible allocations of signs 
rapidly becomes too time consuming, as the parameters {n, K, d} are increased. Intelligent 
search techniques must be used, and barren branches of the tree ruled out as efficiently 
as possible, while fruitful branches must be identified before the search begins, which is 
the demanding task of the human researcher. In this section a pair of quantum codes will 
be presented, both of which were found by taking advantage of two simple methods to 
identify fruitful branches and thus find suitable sign allocations quickly. Before discussing 
these sign allocations, however, we will consider ways of combining classical codes which 
go beyond the simple recipe C% C C%. 

The generator matrix of a quantum code, equation (|12|), creates one classical code 
(forming the first quantum code vector) and 2 K — 1 cosets (which form the remaining 
quantum code vectors). Thus we may picture the first quantum code vector as a lattice 
of points in a 2 n -dimensional Hamming space, and the other code vectors as this lattice 
displaced around Hamming space by distances of order d. The codes described in previous 
sections used lattices displaced so that each point in any given lattice was at least a 
distance d from any point in another lattice. In other words, the set of all the lattices 
formed a classical code of distance d, and this ensured that error correction was possible 
in basis 1. However, in forming a quantum code, it is not necessary to displace the lattices 
as far as this. Bit flips in basis 1, ie amplitude errors, will cause a given lattice to move 
towards some other lattice, ie the code vectors approach, but if we now allow the signs in 
basis 1 to be negative as well as positive, then lattices (ie cosets) which overlap, in that 
they contain the same sets of words, may nevertheless correspond to orthogonal quantum 
states since there is an equal number of positive and negative contributions to the inner 
product (i, e/c \j, e/), where \i, e^) , \j, ei) are code vectors affected by errors e^, e/. Thus if 
we start from a set of code vectors with all-positive signs when written in basis 1, then the 
introduction of sign changes permits the distance between cosets in basis 1 to be reduced. 

Clearly, we must not hope for too much from this ability to allow the cosets to ap- 
proach. The minimum assumption is that we may permit the distance between cosets in 
basis 1 to be reduced by one. In other words the recipe for a {n, K, d} quantum code 
becomes C% ^ C\ where C 2 is a distance d classical code as before, but now G\ is a 
distance d — 1 code. In addition, we wish C 2 to have as large a minimum distance as 
possible, in order to allow a lot of 'room' to move the lattice around in Hamming space 
before it overlaps itself. These two conditions, together with a judicious application of 
sign changes, will be used to find optimal single-error correcting quantum codes. First, 
however, we must consider how to apply sign changes to the words in the code vectors. 

The first method to allocate sign changes to the words in each code vector is to restrict 



the possible sign allocations to those given by rows of the Hadamard matrix [pTlJ] . That is 
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to say, we use the w x w Hadamard matrix to supply w different allocations of w signs. 
A sign allocation is a set of w +l's and — l's, giving the signs of each of the w words in 
the superposition forming the code vector to be tested. The Hadamard matrix can be 
used in this way since since in all the codes considered here, each code vector contains a 
number of words w equal to a power of 2. It is not hard to convince oneself that a row 
of the Hadamard matrix is an intelligent choice of sign allocation for any quantum code 
derived from a linear classical code by the methods discussed in previous sections (with 
one or more bits deleted). 

Once we have a code vector, that is, a set of words with a proposed sign allocation, 
it is tested. The test consists of first testing whether errors in the code vector lead to 
states orthogonal to the code vector itself and to each other, and then testing whether 
such erroneous states are also orthogonal to all the other code vectors in the code and 
their erroneous versions. The possible errors included in the test are all those which 
the code is supposed to be able to correct. If a code survives such a test, then errors 
of different syndrome lead to orthogonal states, and the orthogonality of different code 
vectors is also preserved. Such an 'orthogonal coding' implies that error correction is 
certainly possible. This latter fact is a central part of the argument presented in ]1| and 
[§]. An elegant presentation of it is also provided by Ekert and Macchiavello ||10|| , which 
enables the latter authors to deduce a quantum version of the Hamming bound, based on 
counting the number of possible orthogonal directions in Hilbert space. Their bound is 

< T (22) 

for the size K of a possible quantum code which can correct t general errors using n 
qubits. This bound is more general than that required for {n, K, 2t + l} + codes derived in 
[@], since it includes the possibility of the more general {n, K, 2t + 1} codes which we are 
considering in this section. However, there is an intriguing possibility that it is not strictly 
necessary for all possible error syndromes of all possible code vectors to be associated with 
mutually orthogonal states, since some error correction techniques may be able to correct 
errors of different syndrome without needing to distinguish the syndromes explicitly. This 
is the subject of active research M, [TB|, [TJJ and will not be addressed in the present work. 




In other words, we use 'orthogonal coding' throughout. 

The second of our two methods to identify fruitful trial codes is to consider the sign 
allocation, that is the row of w +l's and —l's, as itself a binary vector of length w, and 
then to use linear combinations of such vectors in a fashion to be explained shortly. To 
keep the notation concise, we replace +1 in the sign allocation vector by 0, and —1 by 
1, to get a vector in the usual binary form, but one which is understood to represent a 
sign allocation among w superposed words. Note that this vector has length w, which 
is a power of two and usually larger than the length n of the words in the superposition 
forming a code vector. For example, the sign allocation for the two code vectors of the 
five-qubit code of || can be written 

00010100,01110010 (23) 
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where the least significant (ie rightmost) bit in the sign vector gives the sign of the first 
word in the code vector, and we assume the order of the words in the code vectors is that 
obtained when they are generated using the generator matrix 



G 



( 10101 ^ 
10011 
01111 

VTTTTTJ 



(24) 



(cf equation [T^ for the notation). Note that the signs in (^) are not rows of the Hadamard 
matrix, showing that the Hadamard method will not pick up all good codes. However, 
both sign vectors in (|23|) are offset from rows of the Hadamard matrix by the same code 
vector 00010100, so (|2BJ) is a coset of a sign allocation obtained by the Hadamard method 
(ie a coset of a subset of a first-order Reed-Muller code). 

The second of our two methods to allocate signs only applies to codes of more than 
one encoded qubit, ie having more than two code vectors. The method is to let the set 
of 2 K w-bit sign vectors itself be a classical linear code (or a coset of a linear code if 
necessary), and to allocate each sign vector thus generated to the corresponding code 
vector generated by G. For example, once we have found sign vectors s o, Soi> Si for the 
first three code vectors of an {n, 2, d} code, we try the sign vector sn = s 00 © s i © s io f° r 
the fourth code vector. By this process, we only need K sign vectors (plus possibly one 
more to form a coset) to specify all the signs for an {n, K, d} code, rather than finding 
2 K independent vectors which is a much more demanding task. 

The quantum Hamming bound ( |2"2"D states that for single error correction (t — 1, d = 
3), at least n — 5, 7, 8, 9, 10 qubits are required to encode K = 1, 2, 3, 4, 5 qubits respec- 
tively, and n = 10 qubits are required to correct K = 1 qubit with double error correction 
(t = 2, d = 5). The n = 5 case is a perfect code since it fills the bound, and is that 
discussed in || [7|. The next most simple case is n = 7, for which we search for an en- 
coding of 2 qubits with single error correction. I have not found such a {7, 2, 3} code, 
despite a wide but not complete search (this search was not restricted to the two methods 
just discussed). The best codes I have found are ones which encode 2 qubits using 7 
but for which the third and fourth code vectors are not quite compatible with the first 
and second. That is to say, there are 10 cases in which a single-qubit error in one code 
vector leads to the same quantum state as a different single-qubit error in another code 
vector, causing an ambiguity for any error corrector. These 10 cases are taken out of the 
88 2 /2 = 3872 possible comparisons between one code vector with its erroneous versions 
and another code vector with its erroneous versions, so the code comes close to single 
error correction, while not realising it completely. 

An encoding of three qubits permitting complete single error correction can be ob- 
tained with n = 8, which is optimal in that this is the lower limit given by fl2"2"|). To find 
the code, we begin with a classical code C2 having minimum distance at least 3, to allow 
correction of errors in basis 2 (phase errors) and having a dual C2 of minimum distance as 
large as possible, since this dual code defines the lattice in basis 1 whose various displaced 
versions constitute the code vectors in basis 1. The [8,4,3] Hamming code is not a good 
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choice since its dual has a minimum distance of only 1. Instead we adopt the extended 
Hamming code or Reed-Muller code C2 = [8,4,4], which is self-dual so C% has minimum 
distance 4. Since we want d = 3, we allow C\ to have distance d— 1 = 2. This suggests the 
even-weight [8, 7, 2] code, which has the correct number of code vectors to allow K = 3. 
Thus we obtain the following generator: 

/ 01010101 \ 
00110011 
00001111 

11111111 



G 



{8,2,3} 



11000000 
10100000 
y 10001000 J 



(25) 



The sign vectors are found by computer search using the two short-cuts described above, 
which leads to eight sign vectors generated by 



S 



{8,3,3} 



/ 0011001100110011 
0000111100001111 
V 0110011001100110 



/ 3333 
0F0F 
\ 6666 



(26) 



where the second version is the first written in hexadecimal to bring out the structure. 

Equations flU) and © are quite concise and combine several new notations intro- 
duced in this paper. To make sure the notation is correctly understood, the {8, 2, 3} code 
defined by these equations is now written out in full: 



l^ooo) 


= + 


00000000) + 


101010101) 


+ 


100110011) 


+ 


101100110) 




+ 


00001111) + 


101011010) 


+ 


100111100) 


+ 


101101001) 




+ 


11111111) + 


110101010) 


+ 


111001100) 


+ 


110011001) 




+ 


11110000) + 


110100101) 


+ 


111000011) 


+ 


110010110) 


\v001) 




11000000) - 


110010101) 


+ 


111110011) 


+ 


110100110) 






11001111) - 


110011010) 


+ 


111111100) 


+ 


110101001) 






00111111) - 


101101010) 


+ 


100001100) 


+ 


101011001) 






00110000) - 


101100101) 


+ 


100000011) 


+ 


101010110) 


\v010) 




10100000) - 


111110101) 




110010011) 




111000110) 




+ 


10101111) + 


111111010) 


+ 


110011100) 


+ 


111001001) 






01011111) - 


100001010) 




101101100) 




100111001) 




+ 


01010000) + 


100000101) 


+ 


101100011) 


+ 


100110110) 


|u011) 


= + 


01100000) + 


100110101) 




101010011) 




100000110) 






01101111) - 


100111010) 


+ 


101011100) 


+ 


100001001) 




+ 


10011111) + 


111001010) 




110101100) 




111111001) 






10010000) - 


111000101) 


+ 


110100011) 


+ 


111110110) 
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|ulOO) 


= + 


10001000) - 


11011101) - 


10111011) + 


11101110) 




+ 


10000111) - 


11010010) - 


10110100) + 


11100001) 




+ 


01110111) - 


00100010) - 


01000100) + 


00010001) 




+ 


01111000) - 


00101101) - 


01001011) + 


00011110) 


|vl01) 


= — 


01001000) + 


00011101) - 


01111011) + 


00101110) 




— 


01000111) + 


00010010) - 


01110100) + 


00100001) 




— 


10110111) + 


11100010) - 


10000100) + 


11010001) 




— 


10111000) + 


11101101) - 


10001011) + 


11011110) 


|«110) 




00101000) + 


01111101) + 


00011011) - 


01001110) 




+ 


00100111) - 


01110010) - 


00010100) + 


01000001) 






11010111) + 


10000010) + 


11100100) - 


10110001) 




+ 


11011000) - 


10001101) - 


11101011) + 


10111110) 


|ulll) 


= + 


11101000) - 


10111101) + 


11011011) - 


10001110) 






11100111) + 


10110010) - 


11010100) + 


10000001) 




+ 


00010111) - 


01000010) + 


00100100) - 


01110001) 






00011000) + 


01001101) - 


00101011) + 


01111110) 


This code has also recently been derived by Gottesman |15| . 


He presents a general 



construction for {2 r , 2 r — r — 2, 3} codes. These parameters are consistent with the sup- 
position that such codes are obtained from the above method applied to the classical pair 
C£ = first order Reed-Muller [2 r , r + 1, 2 r " x ] code, d = even weight [2 r , T - 1, 2] code. 

Proceeding to the encoding of four qubits, the bound ( p^) implies that single error 
correction is possible with n = 9. However, n = 9 is not large enough to allow a significant 
improvement on the properties of the [8, 4, 4] classical code, so it seems unlikely that 
{9,4,3} is possible, and I have not been able to find such a code. With n = 10, on 
the other hand, we can adopt the 11-bit code indicated in tables [1] and |2| which allows 
d = 3, d 1 - = 5, reducing it by the first construction in (§) to obtain C 2 = [10,6,3], 
C 2 = [10,4,4]. This leads to the following quantum code: 

/ 0101010110 \ 
0011001101 
0000111100 
1111111100 



G 



{10,4,3} 



s 



{10,4,3} 



1100000000 
1010000000 
1000100000 

V 0000000011 j 

( 0011001100110011 \ 
0000111100001111 
0101010110101010 

V 0000111111110000 J 



(27) 



3333 
0F0F 
55AA 
0FF0 



(28) 
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Calderbank et al. [O] have also obtained a code of these parameters. The quantum 
Hamming bound ( p2f) does not rule out the possibility of a further information qubit 
without increasing n, ie {10, 5, 3}, but I have been unsuccessful in finding such a code. 
To encode 5 qubits with single error correction, the classical 11-bit code with d = 
5 just mentioned can be used to obtain the following quantum code 



3, d 



^{11,5,3} 



/ 01010101100 \ 
00110011010 
00001111001 
11111111000 
11000000000 
10100000000 
10001000000 
00000000110 
V 00000000101 J 



s. 



{11,5,3} 



/ 3333 \ 
0F0F 
55 AA 
0FF0 
V 3333 J 



(29) 



This is optimal for 5 information qubits and single error correction if {10,5,3} does not 
exist. 



4 Conclusion 

Much research is currently directed to finding the most efficient quantum error correction 
techniques. Commonly in these efforts only the simplest example code, encoding a single 
qubit of information, is actually identified. However, to convey many bits of information, 
it is known from classical theory that more advanced codes, involving many information 
bits, are more powerful than a repetition of single-information-bit codes. This implies 
that a more efficient coding technique is not useful unless the task of applying it to many 
information bits is mathematically tractable. A simpler coding technique, which is less 
efficient than other methods for one qubit, may become more efficient than the competing 
methods when many qubits are involved, simply because powerful many-qubit codes can 
be identified for the simpler method but not for its competitors. 

In this paper many examples have been given of quantum error correcting codes of 
reasonably high efficiency. In the process, several simple techniques for manipulating codes 
and guessing new ones have been described. Quantum networks to encode and correct 
each code have not been given, since they can de deduced directly from the relevent 
generator and parity check matrices [theorem 5]. 

Starting with the simplest general method of quantum error correction, based on 
dual pairs of classical linear codes, and specified here by the notation {n, K, d} + , we 
have tabulated codes which can be lifted almost directly from classical coding theory 
because they are self-dual or weakly self-dual. In addition, classical dual code pairs with 
maximal d, d 1 - have been tabulated, since they form a useful starting point for finding 
quantum codes. We have then examined in more detail the case of single error correction, 
obtaining many good quantum codes from classical codes which are not weakly self- 
dual, and whose conversion to the quantum case therefore requires more ingenuity. A 
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method using a subset of the rows of the generator matrix as extra parity checks has 
been described, and used to find quantum codes of parameters {10,2,3} + , {12,3,3} + , 
{13,5,3}+, {14,6,3}+, {17,7,3}+, {19 • • • 27, 8 • • • 16, 3}+. 

Next, we have improved on the {n, K, d} + codes by allowing one of the classical codes 
(Ci) used to generate the quantum code to have its minimum distance reduced, and 
compensating for this by allowing the signs of words in the code vectors to be either 
positive or negative in all bases. To find out how to allocate the signs in this case, it 
is necessary to use insight rather than trial and error. By making the sign allocations 
themselves form a classical linear code, and by using the Hadamard matrix to supply 
useful sets of signs, we have introduced further structure into the quantum code. As 
well as making the design of generator and corrector networks easier, this allows the 
set of possible sign allocations to be vastly restricted, which greatly aids the search for 
good codes. These methods have enabled us to identify single-error correcting {n, K, 3} 
quantum codes of n = 8, 10, 11, K = 3, 4, 5 qubits respectively. The first is optimal, and 
it is possible that the others are also, though {10, 5, 3} and {11, 6, 3} are not ruled out by 
the quantum Hamming bound. 

Developing general methods for producing good error correcting codes is notoriously 
difficult. The task of finding good codes can be framed as a computational problem. It 
may be an example of a practically important computation whose solution on an ideal 
quantum computer is more efficient (has lower computational complexity) than any algo- 
rithm for a classical computer. 

The author is supported by the Royal Society. 
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